mount_nullfs inside a jail
Pawel Jakub Dawidek
pjd at FreeBSD.org
Tue Jul 24 14:46:33 UTC 2007
On Tue, Jul 24, 2007 at 06:03:47PM +0400, Boris Samorodov wrote:
> On Mon, 23 Jul 2007 15:33:33 +0200 Pawel Jakub Dawidek wrote:
> > As you can see, nullfs doesn't have 'jail' flag. The only jail-friendly
> > file system currently is ZFS. Nullfs is a good candidate for a
> > jail-friendly file system, but is not marked as such yet.
>
> Does somebody know if only a flag is missing or not?
You may try changing the line in /sys/fs/nullfs/null_vfsops.c from:
VFS_SET(null_vfsops, nullfs, VFCF_LOOPBACK);
to:
VFS_SET(null_vfsops, nullfs, VFCF_LOOPBACK | VFCF_JAIL);
but I don't think anyone did any security analysis of this yet.
--
Pawel Jakub Dawidek http://www.wheel.pl
pjd at FreeBSD.org http://www.FreeBSD.org
FreeBSD committer Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20070724/cb568191/attachment.pgp
More information about the freebsd-current
mailing list